$ rpki-client -vvf rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft File: pFVIOEAp8fN2pyJjKU0GWujJRCI.mft (raw, json) Hash identifier: LnaawD7urSnxdqQrqlB/1IWQ2XV/2laGWxeHvD51uGo= Subject key identifier: 35:3D:E8:4C:65:A6:64:BE:85:85:3C:39:4E:7D:4E:FE:57:BE:32:E3 Authority key identifier: A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 Certificate issuer: /CN=A9137992/serialNumber=A45548384029F1F376A72263294D065AE8C94422 Certificate serial: 0651 Authority info access: rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer Subject info access: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft Manifest number: 064E Signing time: Mon 02 Jun 2025 17:04:59 +0000 Manifest this update: Mon 02 Jun 2025 17:04:59 +0000 Manifest next update: Mon 09 Jun 2025 17:04:58 +0000 Files and hashes: 1: pFVIOEAp8fN2pyJjKU0GWujJRCI.crl (hash: MU7uiPrKULols9I3dgEls83ZEfalXjwjXk5vyBCJrX8=) 2: 819B5C3274CB11EF941F0A71C4F9AE02.roa (hash: VjvaaM8L2XxhBSFFAzo+odtR38jKp4RPZEbo1pt7Hh0=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Mon 09 Jun 2025 17:04:58 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1617 (0x651) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A9137992, serialNumber=A45548384029F1F376A72263294D065AE8C94422 Validity Not Before: Jun 2 17:04:59 2025 GMT Not After : Jun 9 17:04:58 2025 GMT Subject: CN=683dd9bb-c152 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:9a:39:40:db:ab:41:ba:95:cc:a3:75:a0:e8: ea:0d:9b:89:58:1f:2a:1e:6e:7e:75:36:88:7b:f0: 33:a7:f1:ee:74:87:65:0f:6c:99:ec:18:d9:6f:36: 40:35:f4:3e:82:f8:cb:4f:d8:ad:3a:51:c2:67:1d: 21:51:06:2d:5f:36:fc:9b:44:bc:18:9d:01:fa:e6: 00:9d:45:27:8c:a2:8e:0d:c1:dc:7b:7e:dc:35:b4: ee:45:e9:f2:f7:0a:b7:41:b3:bf:88:b9:42:ec:a6: 4e:e0:40:35:e8:47:86:48:64:82:52:71:58:08:37: b7:be:31:56:b7:fe:0d:77:3d:a1:43:8f:5e:06:25: eb:d5:8b:95:3f:19:d1:66:b3:fd:5b:86:8c:80:20: 24:d2:3a:16:b7:22:4f:53:7c:ef:bf:34:48:ca:0f: 1a:38:61:44:5d:ab:0e:d0:45:db:ca:78:f3:70:05: 65:6c:80:7f:1a:4e:2f:7a:62:33:40:c5:21:25:d8: b7:c3:32:58:16:88:81:35:03:9c:9e:9e:05:c2:3e: 0b:30:3a:cd:b8:07:10:06:e8:4f:9d:35:d5:41:18: 32:29:b8:ab:0b:76:e9:4f:64:ca:7b:a8:15:87:91: 70:28:30:d9:64:19:37:97:e3:ee:ac:bb:44:fd:b6: 11:ef Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 35:3D:E8:4C:65:A6:64:BE:85:85:3C:39:4E:7D:4E:FE:57:BE:32:E3 X509v3 Authority Key Identifier: keyid:A4:55:48:38:40:29:F1:F3:76:A7:22:63:29:4D:06:5A:E8:C9:44:22 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/pFVIOEAp8fN2pyJjKU0GWujJRCI.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9137992/18A81EF08D2E11EB9840E05FC4F9AE02/pFVIOEAp8fN2pyJjKU0GWujJRCI.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 38:c0:3e:3b:e9:fc:17:19:af:40:9b:44:e7:a1:c8:1c:2d:c1: e8:15:af:d2:a7:9d:69:7d:d2:0b:df:80:cb:61:04:d4:f2:27: 6c:68:ed:4b:27:e4:86:a0:f4:3d:49:3a:b6:78:15:7f:4f:e9: 59:03:65:31:cc:ca:0b:f0:a6:a5:d0:d9:eb:ed:5a:8a:71:29: 95:de:b9:c6:57:d0:93:39:d6:b1:2e:5c:3a:b6:df:16:60:ed: 78:56:63:a3:b3:e9:a3:b7:ba:b2:d9:7c:c8:17:41:a7:76:31: f6:70:85:f1:4b:10:f2:27:6e:c1:66:63:28:ef:7a:ad:fe:dc: 3c:75:b2:22:97:f9:95:7e:d1:40:a0:d5:6b:af:ef:86:aa:2a: 7d:e7:91:29:02:77:72:1c:69:a1:fb:74:87:65:13:09:d8:0a: 7c:ed:63:bc:b2:ea:f4:a1:5a:c9:7b:b0:b8:b5:af:92:f2:41: 38:b7:a7:d5:9f:75:c6:fd:ee:fa:c8:b5:21:54:a3:22:43:22: 7d:95:c5:38:28:66:37:56:8c:70:3a:bf:30:80:20:10:ab:bd: 7d:ca:3f:5f:ad:f3:7c:dd:f9:7b:78:d2:1c:d8:52:c9:b6:de: 17:53:7a:f5:3b:b5:1b:90:9a:ac:44:51:45:55:47:95:f5:49: 77:f5:1d:87 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICBlEwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Mzc5OTIxMTAvBgNVBAUTKEE0NTU0ODM4NDAyOUYxRjM3NkE3MjI2MzI5NEQwNjVB RThDOTQ0MjIwHhcNMjUwNjAyMTcwNDU5WhcNMjUwNjA5MTcwNDU4WjAYMRYwFAYD VQQDEw02ODNkZDliYi1jMTUyMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvJo5QNurQbqVzKN1oOjqDZuJWB8qHm5+dTaIe/Azp/HudIdlD2yZ7BjZbzZA NfQ+gvjLT9itOlHCZx0hUQYtXzb8m0S8GJ0B+uYAnUUnjKKODcHce37cNbTuReny 9wq3QbO/iLlC7KZO4EA16EeGSGSCUnFYCDe3vjFWt/4Ndz2hQ49eBiXr1YuVPxnR ZrP9W4aMgCAk0joWtyJPU3zvvzRIyg8aOGFEXasO0EXbynjzcAVlbIB/Gk4vemIz QMUhJdi3wzJYFoiBNQOcnp4Fwj4LMDrNuAcQBuhPnTXVQRgyKbirC3bpT2TKe6gV h5FwKDDZZBk3l+PurLtE/bYR7wIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFDU96Exl pmS+hYU8OU59Tv5XvjLjMB8GA1UdIwQYMBaAFKRVSDhAKfHzdqciYylNBlroyUQi MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEzNzk5Mi8xOEE4MUVGMDhE MkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhmTjJweUpqS1UwR1d1akpS Q0kuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy RkQxRkYyL3BGVklPRUFwOGZOMnB5SmpLVTBHV3VqSlJDSS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTEz Nzk5Mi8xOEE4MUVGMDhEMkUxMUVCOTg0MEUwNUZDNEY5QUUwMi9wRlZJT0VBcDhm TjJweUpqS1UwR1d1akpSQ0kubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQA4wD476fwXGa9Am0TnocgcLcHoFa/Sp51pfdIL34DLYQTU8idsaO1L J+SGoPQ9STq2eBV/T+lZA2UxzMoL8Kal0Nnr7VqKcSmV3rnGV9CTOdaxLlw6tt8W YO14VmOjs+mjt7qy2XzIF0GndjH2cIXxSxDyJ27BZmMo73qt/tw8dbIil/mVftFA oNVrr++Gqip955EpAndyHGmh+3SHZRMJ2Ap87WO8sur0oVrJe7C4ta+S8kE4t6fV n3XG/e76yLUhVKMiQyJ9lcU4KGY3VoxwOr8wgCAQq719yj9frfN83fl7eNIc2FLJ tt4XU3r1O7UbkJqsRFFFVUeV9Ul39R2H -----END CERTIFICATE-----Generated at Tue Jun 3 23:55:49 2025 by rpki-client